This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/9xFZf7INYLbCIzyIf9b3P8fIOc0.roa File: 9xFZf7INYLbCIzyIf9b3P8fIOc0.roa (raw, json) Hash identifier: /1LZV84DzzmiMTI58aVYXXt0WNKI/eQJpLTcNCvbGck= Subject key identifier: F7:11:59:7F:B2:0D:60:B6:C2:23:3C:88:7F:D6:F7:3F:C7:C8:39:CD Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC830D1AC411921076C4DA611AD0969 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/9xFZf7INYLbCIzyIf9b3P8fIOc0.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 82.140.187.0/24 maxlen: 24 82.140.188.0/24 maxlen: 24 84.46.131.0/24 maxlen: 24 84.46.145.0/24 maxlen: 24 86.38.98.0/24 maxlen: 24 86.38.100.0/24 maxlen: 24 86.38.102.0/24 maxlen: 24 86.38.103.0/24 maxlen: 24 86.38.104.0/24 maxlen: 24 217.9.244.0/24 maxlen: 24 217.9.245.0/24 maxlen: 24 217.9.247.0/24 maxlen: 24 217.9.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:30:d1:ac:41:19:21:07:6c:4d:a6:11:ad:09:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f711597fb20d60b6c2233c887fd6f73fc7c839cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:cf:a7:90:26:06:6e:f2:32:81:49:78:8e: 38:b6:55:5a:65:13:33:71:94:d3:70:a7:5d:34:a2: d5:83:16:36:c5:84:90:f3:34:49:cd:24:d0:42:b2: 30:cf:5a:8b:bd:b6:50:00:e1:6b:65:78:0a:65:d8: d1:07:23:05:80:7d:bb:2f:b4:29:e1:e6:e2:9e:f0: c7:e8:c1:fa:87:0a:03:b0:58:60:4f:44:be:11:47: cf:bf:a5:a7:09:bb:45:e9:a3:59:ed:5e:0d:03:25: 86:60:f4:93:24:e9:6e:13:70:c4:ab:64:25:a8:83: cc:5a:3a:e8:48:ab:bb:31:b0:62:39:18:95:15:38: 0f:33:bb:76:eb:94:55:2e:6d:fb:27:15:39:b0:df: 6e:c7:46:60:13:32:cc:e7:19:04:4f:3c:01:4f:d9: 16:f7:cb:c6:17:8c:cf:09:e2:ab:9f:d7:7e:09:b8: 92:a4:2a:86:62:76:ce:8f:89:f2:51:74:52:dc:0c: a8:6a:d1:8f:86:70:b9:05:90:ce:73:0c:44:01:6c: 00:fb:98:96:64:e3:38:a9:1b:5f:68:0a:82:7b:ce: 21:11:23:ec:3d:f9:e9:d7:6b:b4:f3:ad:bc:a9:62: 0f:56:95:38:f2:f7:1a:4a:af:5b:12:4a:94:76:46: 43:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:11:59:7F:B2:0D:60:B6:C2:23:3C:88:7F:D6:F7:3F:C7:C8:39:CD X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/9xFZf7INYLbCIzyIf9b3P8fIOc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.140.187.0-82.140.188.255 84.46.131.0/24 84.46.145.0/24 86.38.98.0/24 86.38.100.0/24 86.38.102.0-86.38.104.255 217.9.244.0/23 217.9.247.0/24 217.9.250.0/24 Signature Algorithm: sha256WithRSAEncryption 12:3f:5e:f0:85:c7:23:01:82:4b:2a:76:34:06:c1:95:c3:f5: 8a:6b:25:be:cf:ca:d4:9e:27:72:39:78:9d:89:86:97:5b:6f: 94:24:72:c6:d3:50:f4:c9:0c:d0:0c:c1:cc:97:2d:8f:77:91: a1:7e:55:60:34:8f:f5:6f:25:32:dd:56:62:bf:88:e7:dd:50: dd:bc:b6:03:61:c7:b0:d3:17:1a:28:a2:f7:e2:bc:fc:22:5c: aa:73:36:37:93:cb:54:97:60:13:9d:3a:fb:ba:3d:6e:66:02: 05:7b:d0:02:bc:25:a1:a4:96:25:89:09:71:00:99:88:3a:68: c3:a3:17:ec:44:06:8b:26:e1:a9:21:19:d9:84:c3:b8:7d:e6: 73:e6:00:46:88:1d:07:d4:75:a2:b7:3e:6d:23:b8:29:ef:6f: 3c:aa:8f:01:fb:26:92:54:f0:fe:21:d5:a6:b2:40:45:fe:de: 00:27:a7:04:bf:76:54:2a:77:8a:36:ed:12:32:4b:c1:59:f6: 4c:27:c6:c6:3b:d9:59:de:a9:0e:c5:09:44:76:08:cc:b1:af: 78:d6:5a:41:1b:a6:4f:0f:d3:cf:b0:61:37:37:05:d4:38:3a: 75:38:d5:65:d6:f4:b7:ba:e7:e1:2a:26:08:6f:03:3f:fd:ab: 55:5a:b3:3f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt6yDDRrEEZIQdsTaYRrQlpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzExNTk3ZmIyMGQ2MGI2YzIyMzNjODg3ZmQ2ZjczZmM3YzgzOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp/Pp5AmBm7yMoFJeI44tlVaZRMz cZTTcKddNKLVgxY2xYSQ8zRJzSTQQrIwz1qLvbZQAOFrZXgKZdjRByMFgH27L7Qp 4ebinvDH6MH6hwoDsFhgT0S+EUfPv6WnCbtF6aNZ7V4NAyWGYPSTJOluE3DEq2Ql qIPMWjroSKu7MbBiORiVFTgPM7t265RVLm37JxU5sN9ux0ZgEzLM5xkETzwBT9kW 98vGF4zPCeKrn9d+CbiSpCqGYnbOj4nyUXRS3AyoatGPhnC5BZDOcwxEAWwA+5iW ZOM4qRtfaAqCe84hESPsPfnp12u08628qWIPVpU48vcaSq9bEkqUdkZDbwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFPcRWX+yDWC2wiM8iH/W9z/HyDnNMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvOXhGWmY3SU5ZTGJDSXp5SWY5YjNQOGZJT2MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGMAwDBABSjLsD BABSjLwDBABULoMDBABULpEDBABWJmIDBABWJmQwDAMEAVYmZgMEAFYmaAMEAdkJ 9AMEANkJ9wMEANkJ+jANBgkqhkiG9w0BAQsFAAOCAQEAEj9e8IXHIwGCSyp2NAbB lcP1imslvs/K1J4ncjl4nYmGl1tvlCRyxtNQ9MkM0AzBzJctj3eRoX5VYDSP9W8l Mt1WYr+I591Q3by2A2HHsNMXGiii9+K8/CJcqnM2N5PLVJdgE506+7o9bmYCBXvQ ArwloaSWJYkJcQCZiDpow6MX7EQGiybhqSEZ2YTDuH3mc+YARogdB9R1orc+bSO4 Ke9vPKqPAfsmklTw/iHVprJARf7eACenBL92VCp3ijbtEjJLwVn2TCfGxjvZWd6p DsUJRHYIzLGveNZaQRumTw/Tz7BhNzcF1Dg6dTjVZdb0t7rn4SomCG8DP/2rVVqz Pw== -----END CERTIFICATE-----Generated at Mon Jan 19 17:30:02 2026 by rpki-client